Lucene search

Prototype Pollution

🗓️ 16 Jul 2020 05:25:46Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

ajv vulnerability to prototype pollutio

Reporter	Title	Published	Views	Family All 69
Cvelist	CVE-2020-15366	15 Jul 202019:14	–	cvelist
IBM Security Bulletins	Security Bulletin: Watson AI Gateway for Cloud Pak for Data is vulnerable to an Ajv (aka Another JSON Schema Validator) could allow a remote attacker to execute arbitrary code on the system (CVE-2020-15366)	30 Jun 202318:37	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-15366 An issue was discovered in ajv.validate() in Ajv (aka Another JSON Schema Validator) 6.12.2.	4 Jun 202121:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	11 Apr 202219:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	20 Jun 202416:51	–	ibm
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data Version is affected by multiple vulnerabilties	12 Dec 202317:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm

Vulners

Node

-rh-nodejs12-nodejsMatch12.10.0_4.el7

-rh-nodejs12-nodejsMatch12.14.1_1.el7

-rh-nodejs10-nodejsMatch10.10.0_3.el7

-rh-nodejs10-nodejsMatch10.19.0_1.el7

-rh-nodejs10-nodejsMatch10.16.3_4.el7

-rh-nodejs10-nodejsMatch10.10.0_2.el7

-rh-nodejs12-nodejsMatch12.10.0_4.el7

-rh-nodejs12-nodejsMatch12.14.1_1.el7

-rh-nodejs10-nodejsMatch10.10.0_3.el7

-rh-nodejs10-nodejsMatch10.19.0_1.el7

-rh-nodejs10-nodejsMatch10.16.3_4.el7

-rh-nodejs10-nodejsMatch10.10.0_2.el7

ajvRange≤6.12.2

Source	Link
github	www.github.com/ajv-validator/ajv/releases/tag/v6.12.3
github	www.github.com/ajv-validator/ajv/commit/988982d3fde08e3ea074e8942442834e78c45587
hackerone	www.hackerone.com/reports/897974
github	www.github.com/ajv-validator/ajv/tags
hackerone	www.hackerone.com/bugs

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Jul 2020 05:46Current

2.5Low risk

Vulners AI Score2.5

EPSS0.004